Kaspersky LabKLA11866KLA11866 Multiple vulnerabilities in Oracle Virtualbox
8.2 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
4.9 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:C/I:N/A:N
0.001 Low
EPSS
Percentile
38.6%
Detect date:
07/14/2020
Severity:
High
Description:
Multiple vulnerabilities were found in Oracle Virtualbox. Malicious users can exploit these vulnerabilities to obtain sensitive information, cause denial of service.
Affected products:
Oracle VirtualBox prior to 5.2.44, prior to 6.0.24 and prior to 6.1.12
Solution:
Update to the latest version
Download Oracle Virtual Box
Original advisories:
Oracle Critical Patch Update Advisory – July 2020
Impacts:
OSI
Related products:
CVE-IDS:
CVE-2020-146744.4Warning
CVE-2020-146504.7Warning
CVE-2020-147134.4Warning
CVE-2020-146994.4Warning
CVE-2020-147114.4Warning
CVE-2020-146464.4Warning
CVE-2020-147071.9Warning
CVE-2020-146474.4Warning
CVE-2020-147121.9Warning
CVE-2020-146764.4Warning
CVE-2020-146484.7Warning
CVE-2020-146944.7Warning
CVE-2020-146734.7Warning
CVE-2020-146954.7Warning
CVE-2020-147034.9Warning
CVE-2020-146494.4Warning
CVE-2020-147004.7Warning
CVE-2020-146984.7Warning
CVE-2020-147044.9Warning
CVE-2020-146294.9Warning
CVE-2020-146284.6Warning
CVE-2020-146774.4Warning
CVE-2020-147152.1Warning
CVE-2020-147142.1Warning
CVE-2020-146754.4Warning
References
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14628
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14629
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14646
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14647
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14648
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14649
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14650
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14673
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14674
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14675
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14676
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14677
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14694
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14695
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14698
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14699
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14700
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14703
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14704
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14707
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14711
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14712
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14713
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14714
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14715
statistics.securelist.com/vulnerability-scan/month
threats.kaspersky.com/en/product/Oracle-VirtualBox/
www.oracle.com/security-alerts/cpujul2020.html#AppendixOVIR
www.virtualbox.org/wiki/Downloads
Related
8.2 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
4.9 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:C/I:N/A:N
0.001 Low
EPSS
Percentile
38.6%